Update: Likely not a room-temperature superconductor - The concrete issue that has been discovered is that Protocol 2 does not bind the prover to the circuit. This might be fixable with a cheap subprotocol, but... - I'm starting to come around to @ronrothblum's consistent feedback that Protocol 2 would collapse the polynomial hierarchy. I've previously thought that the specific algebraic structure of the layered circuit basically guards us against the information-theoretic bounds, but after getting a bit more familiarized with the literature I think I'm in the wrong here - Because of this, I'm tempted to claim that there must be some inherent issue with the "aggregate all layers" approach. - The core construction of SNAIL (Protocol 1) seems to remain intact for now, and should be of interest independently
Ole Hylland Spjeldnæs
Ole Hylland Spjeldnæs24.4.2025
Introducing SNAIL Verifiable computation at 1.2-1.3x the speed of native execution*, more than 10,000x faster than state-of-the-art SNARKs * for e.g. typical zkVM computations
5,23K